Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
File: agyGfJeYccetsJ98Yhm6WwZFkxw.mft (raw, json)
Hash identifier: Rd/AVn2nm58n4pu/EHQI60o4Nj/DHG0GBliBIyiAsL4=
Subject key identifier: 2E:13:52:3D:EF:C0:26:2D:26:67:B7:11:76:54:03:4C:4D:1D:D0:5A
Authority key identifier: 6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
Certificate issuer: /CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Certificate serial: 01A16D5B0BAE4D915F7EE688B65CCA478203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
Manifest number: 1274
Signing time: Sat 24 Oct 2026 10:00:45 +0000
Manifest this update: Sat 24 Oct 2026 10:00:45 +0000
Manifest next update: Sun 25 Oct 2026 10:00:45 +0000
Files and hashes: 1: VI3zjeHZdDu0ypEH0uILb9Lb4YA.roa (hash: i7eNNz6Wv21ngloC0Wp7tGBt5qo7AjOzv44UBAKSHF0=)
2: agyGfJeYccetsJ98Yhm6WwZFkxw.crl (hash: 32WJoNrdTb9k1knwPXAL0n3DK0+PGlWkG6iHMXFhHN8=)
3: peSkqWCqswhUNJGM0RGGvifGjM4.roa (hash: dUUdnXPhtGozYsTQ/nVdXfCGkdsE7fr6bznqx68dgNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6d:5b:0b:ae:4d:91:5f:7e:e6:88:b6:5c:ca:47:82:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Validity
Not Before: Oct 24 10:00:45 2026 GMT
Not After : Oct 25 10:00:45 2026 GMT
Subject: CN=2e13523defc0262d2667b7117654034c4d1dd05a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1a:74:96:93:e4:67:0d:6e:82:85:59:88:f6:
af:6a:47:08:c8:21:81:56:d5:3f:98:8f:2d:70:59:
db:79:b9:df:5c:02:07:52:b2:fd:a6:a8:c5:ec:ef:
2f:9e:b5:28:f3:da:56:b0:e0:60:a9:3f:99:14:fc:
0e:51:07:b6:87:b6:72:d0:bb:c6:d8:31:b9:a4:67:
38:8e:bc:01:dd:be:aa:ac:87:cd:7c:c6:39:9e:f3:
3d:cc:33:60:cb:fc:55:85:14:cc:90:14:82:5d:08:
5d:c0:f6:d9:02:63:db:21:3a:8a:a5:f0:a3:00:a9:
60:e0:fd:6c:c3:d8:1c:3b:d7:7f:fa:e8:55:39:7c:
c2:e6:e8:7d:1b:20:de:80:c0:52:ec:43:63:69:5e:
26:a8:30:de:69:9e:cf:2c:87:0a:1c:86:00:f4:dd:
e0:d0:46:1b:f9:7b:fa:ea:5b:e4:30:cb:14:ac:a3:
f6:51:6c:38:e1:d8:af:ef:a1:13:96:e0:9d:4c:c0:
18:d8:37:8a:f3:30:03:1b:70:c4:23:83:58:b8:ab:
22:20:c9:1f:7d:c7:38:ae:e1:fb:bf:52:05:6f:7c:
61:bd:35:05:a7:da:f3:64:35:ba:b5:a1:a1:91:a2:
44:22:eb:32:18:7a:85:cb:d7:47:30:c7:00:47:2f:
6c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:13:52:3D:EF:C0:26:2D:26:67:B7:11:76:54:03:4C:4D:1D:D0:5A
X509v3 Authority Key Identifier:
keyid:6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:5b:22:9b:5f:dc:dd:b9:a1:ac:eb:6c:47:f8:ed:01:c1:e9:
7d:0d:d7:91:5c:ac:fc:bc:3d:f5:cf:d8:0d:52:e5:28:6a:68:
25:b1:b7:f1:05:0d:07:ac:1e:04:71:7d:da:e0:c3:88:80:f1:
b5:12:8a:fe:38:d9:d6:ab:39:8c:9a:ce:a3:61:56:17:e3:63:
10:85:e6:35:39:2a:1f:ea:29:a9:9e:ba:1c:13:8b:52:bd:76:
a1:b6:09:8a:0e:6a:b8:a5:ff:f3:83:7d:5d:66:fb:4c:6c:22:
42:31:83:bf:f9:c8:1e:5d:77:6c:fd:bd:0e:bb:eb:07:d4:e2:
d0:cd:62:e4:17:bb:7d:ea:55:4a:cf:05:4f:70:02:09:6f:c9:
bb:f5:14:08:5d:f2:f7:2a:ba:03:74:ba:75:c0:82:35:87:72:
39:16:d2:83:2c:9b:67:5b:db:d7:bf:47:b4:ba:49:d1:3f:f8:
cb:a4:ec:92:db:51:1d:89:9e:85:f6:b6:f4:78:c2:f4:7c:e0:
f8:d0:4c:c7:b6:77:4f:2e:03:1e:8b:19:9d:97:54:d3:92:16:
dd:19:53:0c:d1:20:a8:a2:99:37:d9:7b:ff:cc:4b:f4:35:1a:
1d:29:2c:22:29:94:b6:2c:25:e1:b2:f2:fb:05:f8:83:30:7a:
58:73:6b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:34:38 2026 by rpki-client